Two separate keys are used for the encryption and HMAC calculation.

The default size of the AES encryption key is 256 bits. This can be customized to use either a 128-bit or 192-bit AES key by modifying the SAKA properties file (see KAM Configuration for details).

The default size of the HMAC key is 256 bits. This can be customized to use either a 224-bit, 384-bit, or 512-bit key by modifying the SAKA properties file (see
KAM Configuration for details).

The default duration for encryption key usage is one (1) month, while that of the HMAC key is one (1) year. At the start of a new month—starting with the first encryption request past midnight—SAKA starts using a new encryption key that it generates automatically based on configured policies; a new HMAC key is generated on the first day of a new calendar year. However, these durations can be customized to use keys on either a daily, weekly, monthly, or an annual basis in the SAKA properties file (see KAM Configuration for details).